Skip to content
AFCO MENA
Apply

AFCO MENA

Privacy Policy

How AFCO MENA handles personal data connected with this website and franchise enquiries.

Last updated: 13 September 2026

1. Who is responsible

AFCO Mena Company / شركة أفكو الشرق الأوسط, Commercial Registration No. 7054834895, Dammam, Saudi Arabia, is the organisation responsible for personal data described in this policy when it operates this website and receives a franchise enquiry. In this policy, “AFCO MENA”, “we”, “us” and “our” mean that company.

You can contact us about privacy or a request concerning your data at info@afcomena.com. No data protection officer is identified on this website. Please do not send identity documents, financial account details, health information or other sensitive personal data by ordinary email unless we specifically and securely ask for it.

2. Scope and when this policy applies

This policy applies to information collected through afcomena.com, including the franchise enquiry form, and to related communications about that enquiry. It does not replace a privacy notice, disclosure or agreement supplied for a later due-diligence, franchise or employment process.

Third-party websites, social-media services and websites reached through our links have their own practices. Read their notices before providing them with personal data.

3. Personal data we collect

We collect data you submit in a franchise enquiry and limited technical information needed to operate and protect the service. We do not ask for special-category or sensitive personal data in the form.

  • Identity and contact data: full name, business email address and telephone number.
  • Business and qualification data: company, country, city, partnership type, brands of interest, investment range, food-and-beverage experience, current business and any message you choose to provide.
  • Enquiry administration data: your chosen site language, submission date and status, consent confirmation, and a form anti-spam field that should remain empty.
  • Attribution data: the referring page and any UTM source, medium, campaign, term or content supplied in the page address.
  • Security data: a keyed hash of the client IP address for rate limiting and abuse prevention. A hash is not presented to staff as your IP address. If Cloudflare Turnstile is configured, the IP address is sent to Cloudflare solely to verify the challenge.

4. How we collect data

Most data comes directly from you when you browse, email us or submit an enquiry. Referral and campaign values may come from the link used to reach the form. The server creates the IP-address hash during submission for security controls.

We do not currently enable optional analytics on this website. We do not sell enquiry data, build advertising profiles from it, or make solely automated decisions that produce legal or similarly significant effects about you.

5. Why we use data

We use enquiry data to receive, assess and respond to a potential franchise or business-development enquiry; communicate with you; conduct proportionate internal qualification and follow-up; maintain records; and protect the form and infrastructure from fraud, spam and misuse.

We may use information where necessary to meet applicable legal obligations, establish or defend legal claims, or manage a relationship that progresses beyond an initial enquiry. Marketing is not a condition of submitting an enquiry: we will seek separate consent before sending direct marketing where consent is required. You can withdraw that marketing consent at any time.

6. Legal grounds and choices

Where Saudi PDPL or another applicable law requires a basis, the intended basis depends on the activity: your consent for the enquiry where consent is requested; our legitimate interests in answering a genuine business enquiry, maintaining records and securing the service where permitted and after the required assessment; legal obligations; or steps requested by you before entering a possible business relationship. We will not rely on a legitimate-interest basis for sensitive data.

Consent is intended to be freely given, specific, informed and capable of being evidenced. Separate purposes should have separate choices where required. You may withdraw consent as easily as you gave it; withdrawal does not affect processing already lawful before withdrawal, and may prevent us from continuing the relevant activity.

7. Required and optional information

The form identifies the information needed to review an enquiry. A name, email address, telephone number, country, city, partnership type, brands of interest, investment range, experience and acknowledgement of the form notice are required. Company, current-business details and message are optional.

If required information is not provided, we may be unable to receive, validate, assess or respond to the enquiry. Giving optional information is your choice; please keep it relevant and do not include another person’s data unless you are authorised to provide it.

8. Recipients and service providers

Access is limited to AFCO MENA personnel and relevant group personnel who need the data for the purposes above. Depending on configuration and the stage of the enquiry, data may also be processed by these recipient categories: Replit hosting and application infrastructure providers; database and security-support providers used to run the enquiry service; and professional advisers or authorities where lawfully necessary.

Resend processes email notifications only when its email service is configured. Cloudflare processes challenge-verification information only when Turnstile is configured. These providers are not enabled merely because they are named here. We may disclose data where required by law or to protect rights, safety and the integrity of our systems.

9. International processing and transfers

Website infrastructure, support providers or recipients may process data outside Saudi Arabia. We do not make a data-residency promise in this policy. Before a transfer where the Saudi transfer rules apply, AFCO MENA intends to confirm a lawful basis, use only the minimum data needed, assess the destination and transfer risks, and apply the safeguards or conditions required by applicable law.

You may ask us at info@afcomena.com for information about the transfer relevant to your enquiry, subject to legal and security limits.

10. Retention and deletion

The proposed retention period for a franchise enquiry is up to 24 months from collection, unless it becomes part of an active partnership record, a dispute, a legal obligation or another documented retention need. Automatic deletion is not currently enabled.

When data is no longer needed, we intend to delete or anonymise it using an approved process, subject to lawful retention and backup limitations. Security rate-limit records are designed to be removed after a short period under the system configuration.

11. Your privacy rights and how to request them

Subject to applicable law and any permitted exceptions, you may request information about your data, access a copy, correction, completion, deletion or destruction, and may withdraw consent. You may also have rights to receive data in a readable format, object to or restrict certain processing, and complain to the relevant authority.

Email info@afcomena.com with the subject “Privacy request”, your name, contact details, country of residence, the right you wish to exercise and enough detail to locate the enquiry. We may request proportionate information to verify identity and authority. The PDPL Implementing Regulations provide for a response without undue delay and generally within 30 days; where permitted because of disproportionate effort or multiple requests, this may be extended by up to 30 additional days with advance notice and reasons.

12. Security and incidents

We use organisational and technical measures intended to limit unauthorised access, alteration, loss and misuse, including controlled access, input validation, rate limiting and service configuration. No internet transmission, storage service or security measure can be guaranteed to be 100% secure.

If a personal-data incident requires notification under applicable law, we will assess it and notify affected persons and/or the competent authority as required. Please use a current email address so we can contact you if necessary.

13. Children

This is an adult business and franchise website. It is not directed to children, and we do not knowingly seek personal data from children through the enquiry form. If you believe a child has provided data, contact info@afcomena.com so we can review and take appropriate action.

14. Cookies, local storage and preferences

The site uses necessary browser storage to remember cookie choices. The version-1 record named afco-cookie-consent-v1 stores your analytics choice and an expiry time locally on your device; it is not sent as an analytics profile and expires exactly 180 days after it is saved, when you will be asked again. Optional analytics is not currently installed or enabled.

Accessibility preferences are stored in the version-1 local record afco-accessibility-preferences-v1 until you change or reset them; they have no set expiry. A dismissal of the language suggestion is stored for the browser session only under lang-suggest-dismissed. You can manage cookie choices at any time using Cookie settings. Browser settings can also clear or block local storage, although necessary features may then not remember your choice.

15. Changes and contact

We may update this policy to reflect an approved operational or legal change. The date at the top identifies the version. Material changes will be presented in an appropriate way before or when they take effect, as required by law.

For privacy questions, requests or concerns, contact AFCO Mena Company / شركة أفكو الشرق الأوسط at info@afcomena.com, Dammam, Saudi Arabia.

Legal references

Related information